Senior SIEM Engineer

Remote or standard office environment.

Travel of approximately 10% for corporate events, training, or client needs.

• Proven experience implementing, administering, or operating SIEM and security logging platforms in enterprise, cloud, or high-compliance environments.
• Experience delivering platform capabilities from requirements and design through implementation, validation, documentation, and operational handoff.
• Demonstrated success integrating multiple security, cloud, endpoint, identity, network, and operational tools into a cohesive monitoring platform.
• Experience diagnosing data quality, ingestion, pipeline, performance, availability, access, and integration problems.
• Experience working under strict regulatory or industry frameworks while maintaining practical, reliable, and supportable platform operations.
• Demonstrable client-facing experience in a consulting, managed-services, or professional-services capacity is preferred.
• Hands-on systems engineering and architecture experience, including requirements definition, architecture development, systems integration, testing, and operational support.
• Cloud experience in architecture, design, implementation, operations, and automation within AWS, Azure, or GCP.
• Practical administration and troubleshooting experience with one or more SIEM platforms, such as Splunk, Microsoft Sentinel, Elastic, or Sumo Logic.
• Experience designing or operating log collection, ingestion, parsing, normalization, enrichment, and retention workflows.
• Working knowledge of cloud-native logging and security services, operating systems, networking, identity, APIs, and enterprise security tools.
• Experience with automation and infrastructure-as-code practices using tools such as Terraform, Ansible, GitLab, GitHub, Python, or similar technologies.
• Understanding of platform reliability concepts, including monitoring, alerting, capacity planning, performance management, availability, backup, recovery, and disaster recovery.
• Ability to work effectively in Agile environments with cross-functional technical teams.
• Excellent communication, organizational, documentation, and problem-solving skills, with the ability to explain complex technical information clearly.
• Demonstrated ability to work independently and collaboratively while maintaining a professional attitude and demeanor.
• Critical-thinking skills to balance security, compliance, reliability, cost, and mission requirements.
• Ability to adapt quickly and operate effectively in fast-paced, dynamic environments.

• One SIEM or security operations certification, such as Splunk Enterprise Certified Admin, Sumo Logic Administration, or Microsoft Security Operations Analyst Associate.
• One professional-level cloud certification, such as AWS Solutions Architect Professional, AWS DevOps Engineer Professional, Azure Solutions Architect Expert, or GCP Cloud Architect.

• Splunk Enterprise Certified Architect or Splunk Certified Automation Developer.
• Cloud security, platform engineering, cybersecurity, or automation certifications.
• CISSP, GIAC, or comparable security certification.
• Experience with Terraform, Ansible, Python, GitLab CI/CD, GitHub Actions, or policy-as-code.

Bachelor’s degree in information technology, computer science, cybersecurity, or a related field, or equivalent combination of education and work experience.

Additional information

At Coalfire, you’ll find the support you need to thrive personally and professionally.

In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.

Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities.

You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more.

And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

At Coalfire, equal opportunity and pay equity is integral to the way we do business.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities.

To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at HumanResourcesMB@coalfire.com.